Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
File:                     w4KAxTALdIiKx-tL-mQX2aLnsL4.mft (raw, json)
Hash identifier:          vjpC7g6KlIRAHcgCVRJnXgMrCJOTd7NCnoLom7l/D7Q=
Subject key identifier:   5E:BD:9D:64:D4:85:99:BE:23:04:77:B9:53:0C:D8:F9:18:C3:D6:FC
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Certificate issuer:       /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial:       01962F073C93614946C61D3D783AA7B2AFFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
Manifest number:          0B00
Signing time:             Sun 13 Apr 2025 12:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:05 +0000
Files and hashes:         1: 3X5B_z_CHT9YiArtKHYnEy7SS1U.roa (hash: tIWfVACal3ac9CgPfVZfL2hoiDFlKQiV1Zl+vw5e/Tk=)
                          2: SGMklr5AeE8jGTkv_5TNxH2UtBY.roa (hash: 5/gm3b3ZHQxuqtVGihJbcna/seeg7cLgU18tVnIiLhE=)
                          3: YnNaNaJD1roR8fiBIRCptKdNYSA.roa (hash: hWJl5OVQZwXolKLlwsA6dPvpZnoljW3lkqXI0S55fsE=)
                          4: ZNK2yVGmqY9cKlRRYFyLq67rw-E.roa (hash: kvNahyGm54CbIQBruUdPtz1KWlO/aeURzb93vxVq/YM=)
                          5: b4ilz5cjneNbJCGND0KrV8AKjB8.roa (hash: PSjmmrzuJ8D1JvT+xfT6TqWRijjyUCKhXYQ2nxXKOEI=)
                          6: b8amouc5NzFqjscaRrOj6weycFA.roa (hash: Ea4IxhOv1TIoufKz4IgFHc66XYbjbrOPHzf3UfhHQ7g=)
                          7: do9Nt_FPAEo5VVz8Pbk3FRxxJgg.roa (hash: k1RN7auzMzLc2UgDbM8AYnIQyyXw9gfdYrU6JVdwe5M=)
                          8: dxhWp3_NqvTv1IRse6LQOHfx47g.roa (hash: mWGSet2Lx6Z+w3LOY+Kg9UF4I116qcxHWb+FJ66ZnOg=)
                          9: hN7zKkOexRQZr-KvvxJ68RRBR88.roa (hash: 83LMiX+7xkSI2TZz6xMtRRpAT0AOqOI9dFyBzIQNyH4=)
                          10: lCAntpV3Puug9eCtgagQuIkxOkk.roa (hash: Dfdd9Vbsr3JXtzS/5wXqKvxVfHrr1H8kKXKW+IQNi8s=)
                          11: mkmzSBfTmh1927TwjKRzkGSilpo.roa (hash: ZpaUb66empT2T5gziJ4fvdd/emyVETapR7pDi9FUco0=)
                          12: nnCUhVImeKVSSHsPJ4bQMntIe0k.roa (hash: y/vliRYcabvic0DNd0VxC9usOOdHfTvNAxGNCa7L498=)
                          13: onUpvp2eOcQTulUwC5YOYeY8lJs.roa (hash: 8louP+hvp9qC9hZoR1YbgH+oKr8dxR60G/3uHXuTDIM=)
                          14: w4KAxTALdIiKx-tL-mQX2aLnsL4.crl (hash: Tic2QvbAJ7TQJbnMVIfM12Nt4kOy/nmfax+WN5XtvvU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3c:93:61:49:46:c6:1d:3d:78:3a:a7:b2:af:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
        Validity
            Not Before: Apr 13 12:02:05 2025 GMT
            Not After : Apr 14 12:02:05 2025 GMT
        Subject: CN=5ebd9d64d48599be230477b9530cd8f918c3d6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:86:a2:e8:e9:b3:31:46:7c:59:46:ec:3f:
                    a4:ef:74:b2:14:79:31:4a:26:34:9f:bb:0e:3b:61:
                    36:55:ec:d2:1e:8f:65:aa:bc:04:72:2c:d8:b7:25:
                    9d:77:90:4a:37:03:2d:d6:e2:30:c4:ae:95:a0:18:
                    47:c3:c5:37:72:b5:99:5f:b4:47:d8:5a:25:9f:5e:
                    cd:dc:f0:e0:61:cb:4c:7b:91:09:b6:07:61:4e:56:
                    60:0c:da:0d:99:be:fd:b8:01:a5:c8:6b:2e:69:da:
                    f6:21:6c:1a:51:ae:9d:fe:35:23:b4:b2:c6:2a:bb:
                    64:25:34:68:e1:6a:b7:2f:4f:d7:dd:38:e1:9b:4c:
                    0d:75:62:88:bc:d3:2a:35:5d:9d:ec:78:01:b0:53:
                    55:3e:91:02:dc:80:ee:35:6b:d7:96:a9:93:ce:58:
                    82:fb:a9:b7:b5:92:0c:65:3d:46:a4:77:ff:10:3b:
                    49:28:3f:f3:f9:7a:1b:78:1b:c0:bd:1c:68:79:44:
                    81:de:32:c6:00:c6:f6:ef:ca:cf:dc:bd:bd:29:32:
                    76:7b:a8:f0:5d:0e:7f:10:b5:c7:2c:9a:70:1f:be:
                    22:a4:17:85:1e:a9:7b:ff:67:a0:e9:04:8d:ec:ac:
                    1d:c8:a1:47:87:b2:83:02:21:da:fa:5c:a1:06:00:
                    c5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BD:9D:64:D4:85:99:BE:23:04:77:B9:53:0C:D8:F9:18:C3:D6:FC
            X509v3 Authority Key Identifier:
                keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:a5:76:eb:8a:e5:a6:6a:a3:6f:9e:f6:aa:25:fd:e2:96:73:
         e8:65:0a:9c:50:71:ae:a5:ed:62:61:8d:f1:46:5a:c1:2f:96:
         32:ca:c5:01:2b:02:78:c0:2b:5d:a9:42:1d:20:37:66:d3:cf:
         d3:7c:3c:27:b1:45:42:09:0c:fd:91:cc:48:b3:01:71:9e:80:
         57:f8:53:2a:f7:4e:d7:f8:06:ca:55:d7:ff:27:97:88:28:28:
         3c:82:d0:b6:de:f1:c8:6e:be:93:f1:b7:11:1d:b0:d1:b4:fe:
         40:ab:35:37:62:f5:28:3f:6c:3e:07:6f:dd:44:bc:04:ec:63:
         1b:5e:9f:4b:8f:e5:f1:b3:ee:a8:ca:bc:58:63:34:50:96:b8:
         6c:31:ab:63:01:dd:a5:04:c3:d4:5a:06:71:78:ec:b0:0a:c5:
         66:d2:f6:b8:0b:39:fa:73:4e:bd:b9:3f:7d:23:01:63:fa:e7:
         c6:f5:7c:fb:c3:f4:7f:74:7b:8a:ba:1e:84:76:dd:af:1d:22:
         4f:ee:8d:97:37:ba:d4:8e:95:33:55:62:ea:ce:18:c3:85:3f:
         d6:f7:d7:6a:28:05:6d:32:e7:dd:f3:28:82:a2:75:cc:1b:be:
         22:52:bd:0f:98:d3:81:9a:8e:ce:2c:f6:b0:48:5f:1e:a6:b8:
         d4:99:3d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----